# Privacy Policy Last updated 14 July 2026 Your data is here to build and run your apps, nothing else. We do not sell it, show advertising, or use your private app data to train third-party AI models. You can export or delete what you create, and you stay in control of the apps and data you build with Orbit. ## When this policy applies Orbit, also published as Orbit Apps, is a product of Vade Labs Pvt. Ltd., a company incorporated in India and based in Bengaluru, Karnataka. Vade Labs Pvt. Ltd. is the data controller for Orbit account data. This policy explains how Orbit handles personal information when you use orbitapps.io, launch.orbitapps.io, Orbit Studio, Orbit apps, docs, APIs, support, marketing, WhatsApp, CLI, MCP, and other Orbit-operated services. Some data belongs to your Orbit account. Some data belongs to the apps you build and the people who use those apps. For account data, Orbit decides how it is used to provide the service. For customer app data and end-user data that you collect through an app you build, you control the purpose of that processing and Orbit processes it to run your app for you. If you use Orbit through an organization, workspace owners and admins may see account status, members, roles, billing, app activity, and project information for that workspace. ## What we collect - **Account information:** your name, email address, authentication details, organization membership, roles, preferences, and the details you use to sign in. - **Build information:** prompts, instructions, uploaded context, generated screens, data models, workflows, API routes, configuration, logs, previews, outputs, suggestions, and other content needed to create or update your app. - **App and end-user data:** the records, files, messages, profiles, form submissions, and other data stored by apps you build or operate on Orbit. - **Connections and integrations:** OAuth grants, API keys, access tokens, repository metadata, webhook configuration, MCP tool context, WhatsApp messages, CLI activity, and data returned by services you connect. Secrets and tokens are protected and used only to perform the actions you authorize. - **Billing and commercial information:** your plan, credit usage, invoices, billing address, tax details, and payment status. Payment card details are handled by our payment processor; Orbit does not store your full card number. - **Usage and device information:** IP address, browser, device, pages viewed, app events, performance metrics, diagnostic logs, crash reports, security events, approximate location, and similar data that helps us run, secure, and improve Orbit. - **Support, feedback, and communications:** messages you send us, survey responses, feature requests, job application information, and marketing preferences. ## How we use it We use personal information to provide Orbit: to build, preview, host, deploy, operate, troubleshoot, secure, bill for, and support your apps and account. We also use information to communicate with you, send service notices, prevent abuse, investigate security issues, comply with legal obligations, understand product usage, improve reliability, and develop features that make Orbit better. We may analyze prompts, outputs, logs, and tool activity to detect abuse, debug problems, investigate security issues, enforce our terms, or support you when you ask us to inspect an issue. We do not sell your personal information. We do not use your app data for advertising. We do not show ads in Orbit. We may use aggregated or de-identified data to understand usage, improve Orbit, and report trends, and we do not try to re-identify de-identified data except as allowed or required by law. ## How Orbit uses AI Orbit uses AI to turn your descriptions, uploaded context, and app state into working software. To do that, we may send prompts, relevant app data, generated outputs, diagnostics, and tool results to AI model providers and related infrastructure that help perform the build or support action you requested. AI providers process this information to return outputs for Orbit. We configure our AI processing so your private prompts, app data, and generated apps are not used to train third-party foundation models. Where Orbit offers data-use or AI-training preferences, you can manage them in your account settings or privacy controls. We may store prompts, outputs, and build traces so you can continue work, audit what happened, debug issues, and improve the service. If you include personal information in prompts, uploads, app data, or instructions, that information may appear in generated screens, workflows, code, databases, previews, or other app outputs. You should not submit highly sensitive information unless it is needed for your app. If your app must process regulated data, you are responsible for making sure your use of Orbit fits your legal, contractual, and security obligations. ## Your apps and end users You own what you build with Orbit. You decide what your app collects, how your app uses it, and what you tell your end users. If your app collects personal information from customers, members, employees, or visitors, you are responsible for your own privacy notice, consent flows, legal basis, user rights, and compliance duties for that app. Orbit processes customer app data to host, operate, secure, support, and improve the app you asked us to run. We do not use customer app data for unrelated advertising or sell it to others. ## Integrations, MCP, and messaging When you connect services such as repositories, messaging channels, APIs, databases, MCP clients, or other tools, Orbit receives the information those services send to us under the permissions you approve. We use that information to perform the build, deployment, automation, or agent action you requested. You can revoke connected services where the product or third-party service allows it. Revoking a connection may stop features that depend on it. Third-party services process your information under their own terms and privacy policies when you use or connect them. If you use Orbit through WhatsApp or another messaging channel, your messages are processed by that channel provider so we can receive them and reply. We use those messages to operate the conversation and the features you ask for, not for advertising. ## Cookies, analytics, and local storage Orbit may use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, protect accounts, measure product usage, understand site performance, diagnose errors, and improve the service. Some of these technologies are necessary for Orbit to work. Others help us understand how people use the site and product. You can control cookies through your browser settings, but disabling necessary cookies may break parts of Orbit. ## Who helps us process data We rely on service providers and subprocessors to run Orbit, including AI model providers, cloud hosting and database providers, analytics and observability tools, email and messaging providers, authentication and security providers, payment processors, support tools, and development or deployment services. Each provider receives only what it needs to perform its part of the service. We require providers to protect the information they process for us and to use it only for the services they provide to Orbit. ## Security We use reasonable technical and organizational measures to protect personal information, including access controls, encryption for credentials and tokens, monitoring, backups, and separation between customer app data where appropriate. No internet service is perfectly secure. You are responsible for using strong authentication, protecting your devices, choosing safe app permissions, and controlling who you invite into your organization or apps. ## Keeping and deleting data We keep personal information for as long as needed to provide Orbit, maintain your account and apps, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and keep security and audit records. When you delete an app or account, we remove or de-identify associated data unless we need to keep a limited record for billing, tax, security, legal, backup, or legitimate business reasons. Backups and logs may take additional time to age out of our systems. ## International transfers Orbit is operated by an India-registered company, and Orbit and our providers may process information in India and other countries. Where Indian privacy law applies, we will follow applicable rules for cross-border transfers, including any country or territory restrictions notified under law. Where another privacy law applies, we use appropriate safeguards such as contractual protections and other measures recognized by that law. ## India privacy basis Vade Labs Private Limited is registered in India. Where India's Digital Personal Data Protection Act, 2023 applies, Orbit processes digital personal data for lawful purposes based on your consent or for permitted legitimate uses, such as when you voluntarily provide information for an Orbit service, when processing is needed to comply with law, respond to an emergency, protect safety, operate employment or business administration processes, or as otherwise permitted by law. Where processing is based on consent, you may withdraw consent, and we will stop the relevant processing unless another lawful basis or legal obligation applies. Under Indian privacy law, a data principal may have rights to access information about processing, correct or update personal data, request erasure, use grievance redressal, withdraw consent, and nominate another person to exercise rights in case of death or incapacity. We will also respect other privacy rights where another law applies to your use of Orbit. ## Your rights and choices Depending on where you live, you may have rights to access, correct, delete, export, or restrict the use of your personal information; object to certain processing; withdraw consent; opt out of sale, sharing, targeted advertising, or profiling where those concepts apply; appeal a decision; or use an authorized agent to make a request. Orbit does not sell personal information or use it for cross-context behavioral advertising. Orbit does not use personal information to make solely automated decisions that produce legal or similarly significant effects. Depending on where you live, you may have additional privacy rights under applicable local law. If a law applies to Orbit, we will honor requests to access, correct, delete, or receive information about your personal information as required by that law. To make a privacy request, contact us at hello@vadelabs.com. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising privacy rights. ## Applicable law Your use of Orbit and this website is governed by and construed in accordance with the laws of India. Any legal action or proceeding arising from your use of Orbit or this policy may be brought exclusively before the competent courts or tribunals having jurisdiction in Bengaluru, India, and you submit to the jurisdiction of those courts and tribunals, subject to any non-waivable rights or protections available under applicable law. ## Children's Data Orbit's services are not intended for individuals under the age of eighteen (18), and we do not knowingly collect or solicit personal data from anyone under this age, unless as part of a program with a partner, the child has obtained consent or authorization from a parent or guardian before they can use the services. By using our services, you represent that you are at least 18 years old or the age of majority in your jurisdiction. If we discover that we have collected personal data from a minor without verifiable parental consent, we will promptly delete that information. If you believe we may have collected such data, please contact us at hello@vadelabs.com. ## Changes to this policy We may update this policy as Orbit grows. For material changes, we will give notice in the product, by email, or through another reasonable method, and update the date at the top of this page. ## Contact Questions about your privacy, or a request to access, export, correct, or delete your data, can be sent to hello@vadelabs.com, or by post to Vade Labs Pvt. Ltd., Bengaluru, Karnataka, India.